diff --git a/lib/libpam/pam.d/system b/lib/libpam/pam.d/system
index 5ba5567ea9c8..0b5ae5c8fff8 100644
--- a/lib/libpam/pam.d/system
+++ b/lib/libpam/pam.d/system
@@ -1,22 +1,23 @@
 #
 #
 # System-wide defaults
 #
 
 # auth
 #auth		sufficient	pam_krb5.so		no_warn try_first_pass
 #auth		sufficient	pam_ssh.so		no_warn try_first_pass
 auth		required	pam_unix.so		no_warn try_first_pass nullok
 
 # account
 #account	required	pam_krb5.so
 account		required	pam_login_access.so
 account		required	pam_unix.so
 
 # session
 #session	optional	pam_ssh.so		want_agent
 session		required	pam_lastlog.so		no_fail
+session         required        pam_xdg.so
 
 # password
 #password	sufficient	pam_krb5.so		no_warn try_first_pass
 password	required	pam_unix.so		no_warn try_first_pass
diff --git a/lib/libpam/pam.d/xdm b/lib/libpam/pam.d/xdm
index da4ac9f65c28..7f603ab640fd 100644
--- a/lib/libpam/pam.d/xdm
+++ b/lib/libpam/pam.d/xdm
@@ -1,21 +1,22 @@
 #
 #
 # PAM configuration for the "xdm" service
 #
 
 # auth
 #auth		sufficient	pam_krb5.so		no_warn try_first_pass
 #auth		sufficient	pam_ssh.so		no_warn try_first_pass
 auth		required	pam_unix.so		no_warn try_first_pass
 
 # account
 account		required	pam_nologin.so
 #account	required	pam_krb5.so
 account		required	pam_unix.so
 
 # session
 #session	required	pam_ssh.so		want_agent
 session		required	pam_lastlog.so		no_fail
+session         required        pam_xdg.so
 
 # password
 password	required	pam_deny.so